$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa File: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (raw, json) Hash identifier: OvtIBWIONkhrTQi/ko/Qtu38pVg+GOOY2iprHCNF2R8= Subject key identifier: 2C:39:36:A9:14:9C:0E:BF:8D:AB:B7:8B:5B:A1:33:59:DB:1B:F6:CB Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 033C Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa Signing time: Wed 19 Feb 2025 02:54:20 +0000 ROA not before: Wed 19 Feb 2025 02:54:20 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137995 IP address blocks: 103.84.136.0/22 maxlen: 24 2400:a040:a::/48 maxlen: 48 2400:a040:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Feb 19 02:54:20 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b547db-c688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:d6:0d:9d:33:28:04:d9:b9:3e:29:72:08: ca:e7:3c:a9:63:01:9c:c8:ee:a8:09:0f:ed:bc:19: 4a:48:dd:f1:84:38:6e:9e:7e:cc:ad:65:06:e8:7a: 6e:40:1f:6c:c5:f8:65:9d:c3:5d:2e:77:57:fe:55: 61:87:ea:8e:a3:a1:86:cf:60:1c:66:79:c5:77:db: 10:55:4a:7f:0e:4a:9b:2c:d0:34:df:ff:3f:b1:db: 6f:70:3b:69:6a:40:e3:0e:2b:b2:a3:a1:0d:f7:6b: a7:89:8f:af:7c:5d:86:3c:42:d3:d6:1b:eb:f3:49: 4d:ed:80:0f:d4:36:22:8a:e5:5f:ac:7c:26:57:78: 43:f6:ed:ea:96:f6:a5:0d:73:08:ac:c9:74:54:e8: c5:5a:c4:9b:6a:85:2b:82:3b:b1:a4:58:94:e5:d5: ac:9f:65:43:84:ed:e0:e6:70:d3:00:b3:f7:e1:24: a0:07:2e:12:04:e3:97:e5:d3:41:ad:0f:ee:37:48: e3:72:0b:fd:29:da:f3:b3:3e:01:fc:8c:5c:80:a1: 4c:62:ef:82:84:00:0d:09:f3:50:14:a7:a0:9f:96: 13:05:e9:61:34:9d:c5:69:58:7e:e5:fd:8f:ce:44: 27:1b:d3:0e:8b:97:45:7c:bd:ad:49:d0:01:77:14: f9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:39:36:A9:14:9C:0E:BF:8D:AB:B7:8B:5B:A1:33:59:DB:1B:F6:CB X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.136.0/22 IPv6: 2400:a040:a::/48 2400:a040:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 4f:30:1b:22:96:36:86:0f:ea:76:88:62:f8:d2:d3:62:58:1b: b8:0a:65:c0:ea:ab:f0:54:a9:5b:76:f0:88:e9:45:3d:38:cd: a0:04:c4:05:57:b7:37:4b:9f:6e:e7:4c:3d:a1:f6:19:51:86: 91:a3:2e:0a:cc:26:ce:01:25:90:ec:19:6c:7b:c7:75:6b:89: 63:dd:20:23:4e:e9:fb:10:22:4d:01:17:6f:e3:4c:ff:83:38: d5:ef:b4:86:e2:a0:01:28:75:63:f7:f7:85:fc:17:2d:d3:96: 12:69:d8:02:90:7a:e1:a5:ac:a1:97:cf:64:c1:5b:84:25:75: 42:88:7a:b2:a8:80:4f:f2:10:32:e2:99:ca:32:ab:f6:d8:7f: 5f:43:9e:31:b7:6d:7d:41:e5:2f:52:5d:55:ec:17:d3:94:5e: 3d:73:f1:5a:72:50:0b:c1:79:dd:05:58:ed:d5:b8:4b:56:f7: 4c:07:ad:6c:b4:7b:4e:07:78:93:01:00:ea:04:15:b1:79:86: 51:84:d8:0a:a9:b6:b6:f5:bd:93:a1:fa:0f:56:ab:45:68:11: da:a3:6a:5f:2b:f5:78:9e:b5:08:ce:ad:7d:0b:c5:3b:97:51: ff:a9:95:d9:00:e6:2c:af:68:87:cd:e0:74:24:ab:05:75:4c: b8:d5:14:b9 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjUwMjE5MDI1NDIwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1NDdkYi1jNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVLWDZ0zKATZuT4pcgjK5zypYwGcyO6oCQ/tvBlKSN3xhDhunn7MrWUG6Hpu QB9sxfhlncNdLndX/lVhh+qOo6GGz2AcZnnFd9sQVUp/DkqbLNA03/8/sdtvcDtp akDjDiuyo6EN92uniY+vfF2GPELT1hvr80lN7YAP1DYiiuVfrHwmV3hD9u3qlval DXMIrMl0VOjFWsSbaoUrgjuxpFiU5dWsn2VDhO3g5nDTALP34SSgBy4SBOOX5dNB rQ/uN0jjcgv9Kdrzsz4B/IxcgKFMYu+ChAANCfNQFKegn5YTBelhNJ3FaVh+5f2P zkQnG9MOi5dFfL2tSdABdxT5mQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFCw5NqkU nA6/jau3i1uhM1nbG/bLMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMzMzkvNDUyNjc5NzBCMkZBMTFFQ0I1NzRDRTdGQzRGOUFFMDIvMkZDQUMzQUND NDgzMTFFQ0FBQUFDQzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBAJnVIgwGAQCAAIwEgMHACQAoEAACgMHACQAoED//zANBgkq hkiG9w0BAQsFAAOCAQEATzAbIpY2hg/qdohi+NLTYlgbuAplwOqr8FSpW3bwiOlF PTjNoATEBVe3N0ufbudMPaH2GVGGkaMuCswmzgElkOwZbHvHdWuJY90gI07p+xAi TQEXb+NM/4M41e+0huKgASh1Y/f3hfwXLdOWEmnYApB64aWsoZfPZMFbhCV1Qoh6 sqiAT/IQMuKZyjKr9th/X0OeMbdtfUHlL1JdVewX05RePXPxWnJQC8F53QVY7dW4 S1b3TAetbLR7Tgd4kwEA6gQVsXmGUYTYCqm2tvW9k6H6D1arRWgR2qNqXyv1eJ61 CM6tfQvFO5dR/6mV2QDmLK9oh83gdCSrBXVMuNUUuQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:42:10 2025 by rpki-client